Static task
static1
Behavioral task
behavioral1
Sample
1643c13b348eb3027ef48b2722ec34b1_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1643c13b348eb3027ef48b2722ec34b1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1643c13b348eb3027ef48b2722ec34b1_JaffaCakes118
-
Size
1.7MB
-
MD5
1643c13b348eb3027ef48b2722ec34b1
-
SHA1
d6ec2e76b648974eb15eb9b02413afff4d93f685
-
SHA256
b1518484b48650ebfb33b684cdab52d49c060ffd049e14f49b81b0152bd5e1be
-
SHA512
8ed05af731ae46a75b00d9d0fceb1ea806e51face6807fb979b5c5514b271d409148c6969298874fb65ffabd4f0dd27f6503d6a875b020bc35fbb3e1b6ec01c4
-
SSDEEP
49152:hoMnFMiunxTGwXnMilp7viTjQtEL4lKPyQtqwET:hHMCw5i68mKaQI5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1643c13b348eb3027ef48b2722ec34b1_JaffaCakes118
Files
-
1643c13b348eb3027ef48b2722ec34b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
7539b679a8f9ce677a6691ca2457eb42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
lstrcmpA
lstrlenA
Sections
.text Size: 733KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 575KB - Virtual size: 577KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ